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METHODS AND SYSTEMS FOR UNNUMBERED NETWORK LINK 

DISCOVERY 

Raja Shekar C S 



TECHNICAL FIELD 
Embodiments of the present invention relate generally to methods and systems 
for accurately identifying the topology of a network, and, in particular, to methods 
and systems for discovery of unnumbered network links. 

5 

BACKGROUND 

An internetwork of computers typically consists of a geographically distributed 
collection of interconnected network segments which are connected using routing 
devices such as routers. A network segment can be a local area network (LAN) or a 

10 wide area network (WAN). A LAN is a network of computers in close proximity, 
such as a network at one corporate office. The various LANs can then be connected 
together by point-to-point links that form a WAN, such as a WAN connecting all the 
various different locations of the offices of a company. These numerous LAN and 
WAN segments connected by routers form a relatively complex topology of the 

15 network. Because of such complex topologies of corporate networks, it becomes 
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highly important to accurately monitor the network to ensure proper operation, and to 
quickly and accurately detect and correct faults in the network. 

Network management software provides the ability to control and monitor devices 
on a computer network from a central location. A managed device can be any type of 
5 node residing on a network, such as a computer, printer or router. Simple Network 
Management Protocol (SNMP) (a part of the TCP/IP protocol suite) is the protocol 
typically used for the management related communication between the network 
management software application and the managed devices. 

As networks are constantly being modified and expanded with new users, 

10 services, and applications, such network management software is a vital tool for a 
network manager to keep track of the network resources and to allocate the network 
bandwidth in the most efficient manner. These tools, such as Novell's ZENworks® 
for example, allow the network manager to allocate bandwidth between users, 
locations, and applications, and to generally manage network traffic. Typical 

15 monitoring services provided by such software include the ability to monitor 
bandwidth consumption, connection time, response time, and connection failures. 
Using the software, policy rules can then be defined for the network in order to 
optimize traffic, and, specifically, the users, services, and times to which the rules 
apply can also be defined. Moreover, the software can enable the configuration and 

20 remote management of routers and switches, as well as other network devices. 
Accordingly network management systems typically provide functions for fault 
management (for detecting and notifying the network manager when a failure occurs 
in network hardware or software), configuration management (for remotely 
configuring the network devices), accounting (for logging usage of network 

25 resources), performance management (for monitoring the performance of the network 



3 



and the network devices), and network security (for detecting and notifying the 
network manager of potential misuse of network resources). 

Typical network management software also automatically discovers the topology 
of the network and depicts it in the form of a map. More specifically, typical network 
5 management software scans configuration data for the network devices, such as is 
available in route tables and/or interface lists, in order to discover the arrangement of 
the devices in the network and the connections between those devices. These devices 
can include computers, printers, hubs, switches, and routers, and the connections can 
include network nodes or links between devices. Accurate knowledge of the network 

10 topology is important to proper management of the network as well as prediction of 
the performance of the network. For example, the network management application 
needs to know the configuration and links in the network in order to manage the 
network resources, such as shared software application resources and other resources 
such as memory and printing resources. This knowledge can also help to predict 

15 where network traffic may be high, and to plan resources accordingly. Moreover, this 
knowledge can be helpful in determining the cause and location of faults that may 
occur on the network. 

Because of the complexity of most networks, manual discovery of the network 
topology for network management purposes would be burdensome and time 

20 consuming. Accordingly, automated systems have been developed for network 
topology discovery utilizing information regarding the various network addresses of 
the devices in the network. In particular, every device on the network is usually 
identified by a unique address. If Internet Protocol is used, this address is called the 
Internet Address (or an IP address). An IP address consists of a network id and a host 

25 id. The network id represents the LAN or the WAN segment to which the device 
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belongs. A typical network management application uses the network address of each 
network segment connected to a router to discover and depict the topology of the 
network. Such systems have had the capability of identifying the addresses of the 
various devices on the network as well as the addresses of the interfaces of a given 
5 device linking it to other devices in the network. Thus, by automatically identifying 
the network addresses of the devices, interfaces and links, the topology of the network 
can be known. 

A typical automated topology discovery method would create a network 
segment S for each interface of a router, the network segment being identified by the 

10 network number N of the router interface. Other computers are then said to belong to 
the network segment S if they have an address belonging to the same network number 
N as the router interface. Then, if router B contains an address belonging to the same 
network number N, router B is added to segment S and other segments that belong to 
B are linked to S through router B. 

15 Previously, the interfaces of a device have been assigned addresses. For 

instance, each port on a router can be assigned a network address which identifies it . 
However, recently, a feature has been provided on devices such as routers and servers 
which allow no address to be assigned or defined for a point-to-point interface (e.g., a 
communication interface connecting two networks, such as two LAN's of a company 

20 in different cities). This feature was intended to counter the scarcity of addresses, as 
more and more addresses are being used due to the increase in the number of 
networked devices. In particular, point-to-point traffic flows only to a single 
destination or peer, and is therefore not being routed to any other destination. 
Therefore, assigning a unique address to that interface wastes addresses within the 

25 address pool allocated for the network. Such interfaces are called unnumbered 
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interfaces and the point-to-point links between two router interferes are called 
unnumbered links. Unnumbered links can be configured on PPP, frame relay, and 
X.25 interface types, for example. 

Such unnumbered or unaddressed links and interfaces pose a problem to 
5 automated network address based topology discovery methods used by network 
management software applications. In particular, all unnumbered interfaces use a 
default network address, such as 0.0.0.0 . Accordingly, typical automated network 
discovery methods would fail to distinguish one unnumbered interface of a router 
from another unnumbered interface, and would fail to properly assign devices to the 

10 proper segment or router link. Therefore, accurate information cannot be obtained 
regarding the network topology. 

While other attempts to identify unnumbered interfaces have involved use of 
the address of the next hop router in the route table, such methods are likewise often 
not accurate. In particular, many routers from popular vendors like Cisco and Nortel 

15 assign a value of 0.0.0.0 to the address of the next hop router (the ipRouteNextHop if 
SNMP protocol is utilized). Therefore, use of these methods can fail to identify a 
distinct and meaningful value for an unnumbered interface of a router. Moreover, 
many discovery methods can also fail to accurately handle changes in the network 
topology, such as when an unnumbered link fails. 

20 Accordingly, methods and systems for automatically and accurately 

identifying unnumbered network links are desired. 

SUMMARY OF THE INVENTION 
In one embodiment, a method is provided for discovery of network topology in 
25 networks having network routers with unnumbered interfaces. The method comprises 
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obtaining the configuration of all routers in the network, and, for a particular router, 
identifying an unnumbered interface. The method further comprises, for the 
unnumbered interface of a particular router, identifying connected routers on the 
destination networks reachable through the unnumbered interface and adding those 

5 connected routers to a connected router list for the unnumbered interface. For the 
connected routers in the connected router list, the method further comprises 
determining which of the connected routers is an immediate neighbor to the particular 
router having the unnumbered interface. In addition, the method comprises 
determining the connected interface of the immediate neighbor which connects to the 

10 unnumbered interface of the particular router, and identifying an unnumbered link 
between the unnumbered interface and the connected interface. The determination of 
the immediate neighbor can be conducted by determining whether the connected 
router connects to the unnumbered interface and to all other connected routers over 
different interfaces. 

15 According to another embodiment, a method is provided for automated discovery 

of network topology in networks having network routing devices with unnumbered 
interfaces. The method comprises, for a routing device in a network, identifying an 
unnumbered interface of the routing device. The method also comprises identifying 
connected routing devices connected to the unnumbered interface, and determining 

20 which of the connected routing devices is an immediate neighbor to the routing device 
having the unnumbered interface. In addition, the method comprises identifying an 
unnumbered link between the unnumbered interface and the corresponding interface 
of the immediate neighbor, and indicating the unnumbered link in network topology 
data. The determining operation can utilize values in a route table for each connected 

25 router, and the values can comprise the interface index and the route destination. 
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In accordance with another embodiment, a method is provided for automated 
discovery of network topology in networks having network routing devices with 
unnumbered links. The method comprises identifying an unnumbered interface of a 
routing device in a network, using route data to identify connected routing devices 
5 connected to the unnumbered interface, and, for every connected routing device, 
comparing the interface connections of the connected routing device. The method 
further comprises using the comparisons to identify an unnumbered link between the 
unnumbered interface and a corresponding interface of one of the connected routing 
devices. 

10 According to another embodiment, a computer implemented method is 

provided for automated discovery of network topology in networks having network 
routing devices with unnumbered links. The method utilizes executable instructions 
and comprises identifying an unnumbered interface of a routing device in a network, 
determining the immediate neighbor to the unnumbered interface using route table 

15 data of the routing device and other routing devices in the network, and identifying an 
unnumbered link between the unnumbered interface and a corresponding interface of 
the immediate neighbor. The method can further comprise, in some embodiments, 
using route table data to confirm that the immediate neighbor has a network route or a 
default route to the unnumbered interface over the corresponding interface, storing the 

20 unnumbered link in a topology database indicative of the network topology, and 
repeating the method in periodic cycles such that changes in topology are detected 
and identified. 

In accordance with another embodiment, a computer network is provided, 
comprising at least two network devices connected to one another, one device having 
25 an unnumbered interface connected to an unnumbered interface of the other device 
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thereby defining a link that is unnumbered. The network further comprises network 
management information data indicating the interface assignments of the two network 
devices, and a network management system configured to access the network 
management information data, to confirm that the network devices are immediate 
neighbors and connected to one another via unnumbered interfaces, to assign an 
identifier of the unnumbered link, and to present that identifier in network topology 
data. In some embodiments, the network can further comprise three or more network 
devices, and the network management system can be configured to determine the 
connection of the unnumbered interfaces by comparing the interface connections of 
the network devices. 

In another embodiment, a computer readable medium is provided having 
stored thereon data structures for use in automated discovery of unnumbered links in 
a network topology. The data structures comprise an interface data structure 
representing an interface of a first routing device, a connected router data structure 
identifying other routing devices reachable over an interface of the first routing 
device, and an unnumbered connectivity data structure identifying an unnumbered 
link between an interface of the first routing device and an interface of another routing 
device identified in the connected router data structure. 

Various aspects of the present invention will become apparent to those skilled 
in this art from the following description wherein there is shown and described 
embodiments of the invention, simply for the purposes of illustration. As will be 
realized, other different aspects and embodiments can be provided without departing 
from the scope of the invention. Accordingly, the drawings and descriptions herein 
are illustrative in nature and not restrictive in nature. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, incorporated in and forming part of the 
specification, depict several illustrative embodiments, which, together with their 
descriptions, serve to explain principles of the present inventions. In the drawings: 

FIG. 1 is a flow diagram illustrating a method that operates to discover 
unnumbered router links, according to principles of the present invention; 

FIG. 2 is a schematic diagram illustrating an example of connected routers 
having unnumbered point-to-point links which can be discovered by the illustrative 
methods and systems described herein; 

FIG. 3 is a flow diagram illustrating another example of a method that 
operates for discovery of unnumbered links in a network, according to principles of 
the present invention; 

FIG. 4 is a schematic diagram illustrating another example network having 
unnumbered links that can be identified according to principles of the present 
invention; 

FIG. 5 is a flow diagram of an illustrative discovery process that can be 
utilized for unnumbered link discovery according to principles of the present 
invention; 

FIG. 6 is a data structure diagram depicting data structures that can be utilized 
to implement a method of identifying unnumbered interfaces, according to 
principles of the present invention; 

FIG. 7 is a flow chart depicting another example of a detailed method that can 
be used by a network management application to discover the routers in the 
network and identify unnumbered links, according to aspects of the present 
invention; and 
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FIG. 8 is a schematic diagram of a network including a network management 
system that operates in accordance with principles of the present invention. 



DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS 

5 Generally, one embodiment of the present invention relates to a method and 

system for automatically determining the network topology of a computer network 
containing unnumbered or unaddressed links between the routers. An unnumbered 
link is a point-to-point link between two router interfaces which have no addresses 
bound to them. The method according to one embodiment uses the network 

10 management information data available with each such router. After discovering 
router configuration and identifying all unnumbered interfaces, the destination routes 
for each unnumbered interface are used to identify unnumbered links. In particular, 
for an unnumbered interface, the method of this embodiment uses values in the router 
tables indicating the destination routers for that unnumbered interface as well as how 

15 those destination routers connect together and to the unnumbered interface. From the 
information, the method can determine all routers connected to a given unnumbered 
interface. Then, the method can automatically determine which of these routers is the 
immediate neighbor by comparing how they connect (via interface number) to the 
unnumbered interface and how they connect to each other. Once the immediate 

20 neighbor is known, the link between the immediate neighbor and the unnumbered 
interface can then be identified in the network topology. 

FIG. 1 is a flow diagram of an illustrative method of unnumbered link 
discovery, operating according to principles of the present invention. First, as shown 
in block 10, the unnumbered interfaces of a router are identified. Then, as shown in 

25 block 12, for each unnumbered interface, the routes to all destination networks over 
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this particular interface are identified (i.e., it is determined which other routers can be 
reached from this interface, either directly or through additional routers). For these 
destination networks, all routers on the destination networks are then placed into a 
connected router list, as shown in block 14. Then, as shown in blocks 15-16, the 
routers in the connected router list are examined, and it is determined which of these 
routers has the property of having a route to the router being examined and having 
routes to all other routers in the connected router list over two different interfaces. 
This property is thus used to identify the immediate neighbor to the router being 
examined, (i.e., the router at the other end of the unnumbered link), as shown at block 
17. If the immediate neighbor is thus found to have a route back to the examined 
router or a default route, an unnumbered link is created between the examined router 
and the immediate neighbor, as shown at block 18. 

Changes in network connectivity typically occur frequently, as devices are added 
and removed from the network, as network connections fail or otherwise become 
unavailable, or as network connections are modified. To detect such changes in the 
topology, the method of this embodiment of FIG. 1 can be repeated in cycles. In each 
cycle, the discovered connectivity can be stored. In the subsequent cycle, if there is a 
change in topology (e.g., an unnumbered link is down), the route table of routers will 
also have changed. The new route table information can then be used to identify the 
new topology and delete the unnumbered links that are down. 

FIG. 2 illustrates an example of connected routers having unnumbered point-to- 
point links which can be discovered by the illustrative embodiments described herein. 
In FIG. 2, unnumbered interface Ifl on router Rl is connected only to R2 and R3. 
These two routers would be thus placed in a connected router list, or otherwise stored 
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or noted. Therefore, one of R2 or R3 must be the immediate neighbor to interface Ifl 
of router Rl. 

In particular, in the example of FIG. 2, router R3 contains a route to Rl (the 
examined router) and R2 (the other router in the connected router list), but over the 
same interface Ifl (i.e., R3 has the same relative communication perspective with 
respect to R2 and Rl, such that, to communicate a signal to R2 and Rl, R3 would 
send the signal from the same interface Ifl). Therefore, R3 cannot be situated in 
between Rl and R2 and is not an immediate neighbor to interface Ifl of Rl. In 
contrast, R2 contains a route to Rl over Ifl and a route to R3 over If2. Therefore, R2 
is identified to be in between Rl and R3 because it is connected to them over two 
different R2 interfaces. 

Thus, in this embodiment and in accordance with principles of the present 
invention, the routers connected to the unnumbered interface of the examined router 
are identified, and it is determined how these connected routers are connected to each 
other. In particular, the connected router which is connected to the examined router 
and every other router in the connected router list over two different interfaces is 
identified. This technique can also be used when there are more than two routers in 
the connected router list. For example, if R3 in FIG. 2 has an unnumbered link to an 
additional router R4, then interface Ifl on router Rl would be connected to R2, R3 
and R4. So, one of R2, R3 or R4 must be the immediate neighbor. This can be 
determined according to principles of the present invention by examining each of the 
interfaces of R2, R3, and R4 and how they connect to the other routers. In particular, 
it can be determined that R3 is situated in between Rl and R4 (i.e., it is connected to 
Rl and R4 on different R3 interfaces) but that Rl and R2 are on the same side of R3 
(i.e., both Rl and R2 connect to the same R3 interface). However, R2 is found to be 
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situated in between Rl and R3 and also between Rl and R4, because it connects to Rl 
on one of its (R2's) interface and, on a separate R2 interface, to all of the other 
destination routers of the unnumbered interface (of Rl) being examined. So, R2 is the 
immediate neighbor. 

FIG. 3 is a flow diagram illustrating another example of a method for discovery of 

unnumbered interfaces in a network, according to principles of the present invention. 

This illustrative method operates as follows. As shown in block 30, the configuration 

of all the routers in the network is first discovered by accessing configuration data for 

the routers. In one embodiment, this configuration information can be obtained from 

configuration data in the following MEB-2 groups or tables, although it is to be 

understood that other network management data may be utilized in other 

embodiments - 

o system group - contains the system name etc. 
o ifTable - contains Interface info 

o ipAddrTable - contains IP address to interface binding 
info 

o ipRouteTable - contains route information 
Then, for each discovered router R from block 30, the unnumbered interfaces 
of that router are identified. In particular, the operational PPP, Frame Relay or X.25 
interfaces with no IP address bound to them are identified, as shown in block 32. 
Then, as shown in block 34, for each such unnumbered interface I, and for every 
network route over I found in the route table, the routers on the destination network 
are found and added to a list (connected router list) or otherwise stored. Accordingly, 
at this stage, the connected router list for each unnumbered interface contains routers 
which are reachable through this interface. Then, as shown at block 36, for each 
discovered router R, and for each unnumbered interface I of R, and for every router R, 
in the connected router list of the unnumbered interface I, and for every Rj in the 
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connected router list (other than Rj), an interface comparison operation can be 
conducted, in order to determine if Rj is an immediate neighbor to R. This can be 
conducted by the following illustrative software condition operation, for example: 

5 If isIntermediateRouter(Ri, R, Rj ) = TRUE for all R jf Then Rj is the immediate 
neighbor 

The operation "isIntermediateRouter" checks if router Rj is in between R and 
Rj and can be defined as follows, for example - 

10 

isIntermediateRouter(Rj R Rj) 
{ 

The route searched can be a network route or a default route. 

15 If Rj has route to R over interface X and a route to Rj also over interface X 

Return FALSE; 

Else 

Return TRUE; 

} 

20 

Finally, as shown in block 38, if Rj is an immediate neighbor, and if Rj also 
has a route back to R through an unnumbered interface J (route to one of R's networks 
or a default route), an unnumbered link is identified between R's interface I and Rj's 
25 interface J. 

As can be understood, the data needed for embodiments such as these can be 
accessed from one or more stored router tables for the routers analyzed. In particular, 
routers and other network devices typically store and maintain a routing table that 
contains information about destination networks that it knows of (e.g., addresses of 
30 networks or network devices that it knows it can communicate with via a specific one 
of its interfaces). Such tables typically include the destination numbers or addresses, 
as well as, for each destination, the corresponding interface number over which this 

15 



network is reachable and the corresponding next-hop router address (the address of 
the first router on the path to that destination network). These are called "network 
routes". A "default route," on the other hand, is a special entry in a route table. In 
embodiments where EP addresses are used, it will have the destination network 
5 number as 0.0.0.0, all other information being like a network route. For a default 
route, when a signal, such as a packet or other data, has to be sent to a remote 
machine, the router will first attempt to see if it has a network route to the remote 
machined network number. If it does not find one, it uses the default route. In other 
words, the router sends the signal to whatever next-hop router is listed for the default 

10 route via the corresponding default interface. 

FIG. 4 is a schematic diagram illustrating an example network portion having 
unnumbered interfaces that can be identified according to principles of the present 
invention. For the sake of simplicity, it is assumed that the example network is an 
isolated network with no default routes configured. Considering the particular case of 

15 interface 2 (If2) of Router 1, it can be shown how the methods described above can 
identify the unnumbered link to Router 2 over this interface. The routers in this 
example, would have the following route tables if IP addressing were utilized, 
although it should be understood that the inventive methods and systems can be 
applicable to a variety of addressing schemes and protocols. Note that there are 

20 various unnumbered links in these tables. For example, the link between router 1 and 
router 2 is unnumbered, as shown by the tables where the ipRouteNextHop for 
interface 2 of router 1 and for interface 1 of router 2 have the value of 0.0.0.0. This is 
also true for the other point-to-point links, such as between router 2 (interface 4) and 
router 5 (interface 1). 

25 
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Route Table for Router 1 



| ipRouteDest 


ipRoutelflndex 


ipRouteNextHop 


11.0.0.0 


1 


11.0.0.1 


12.0.0.0 


3 


0.0.0.0 


13.0.0.0 


2 


0.0.0.0 


14.0.0.0 


2 


0.0.0.0 


15.0.0.0 


2 


0.0.0.0 


Route Table for Router 2 


| ipRouteDest 


ipRoutelflndex 


ipRouteNextHop 


11.0.0.0 


1 


0.0.0.0 


12.0.0.0 


1 


0.0.0.0 


13.0.0.0 


2 


13.0.0.1 


14.0.0.0 


3 


0.0.0.0 


15.0.0.0 


4 


0.0.0.0 


Route Table for Router 4 


I ipRouteDest 


ipRoutelflndex 


ipRouteNextHop 


11.0.0.0 


1 


0.0.0.0 


12.0.0.0 


1 


0.0.0.0 


13.0.0.0 


1 


0.0.0.0 


14.0.0.0 


2 


14.0.0.1 


15.0.0.0 


1 


0.0.0.0 


Route Table for Router 5 


ipRouteDest 


ipRoutelflndex 


ipRouteNextHop I 


11.0.0.0 


1 


0.0.0.0 


12.0.0.0 


1 


0.0.0.0 


13.0.0.0 


1 


0.0.0.0 


14.0.0.0 


1 


0.0.0.0 


15.0.0.0 


2 


15.0.0.1 



FIG. 5 is a flow diagram of an illustrative process that can be utilized 
according to principles of the present invention, and specifically could be utilized to 
identify and name the unnumbered link between interface 2 of Router 1 and interface 
1 of Router 2 of the example of FIG. 4 (as well as the other unnumbered links). In 
particular, configuration of all the routers in the network is discovered at operation 
block 40. Then, for each router, the unnumbered interfaces are identified (i.e., 
operational PPP, Frame Relay or X.25 type interfaces with no IP address bound), as 
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shown in block 42 of FIG. 5. In this example, Router 1 will be examined in 

particular. Thus, interfaces 2 and 3 would be identified as unnumbered interfaces of 

Router 1 in block 42. Then, for unnumbered interface 2, a list is created identifying 

the routers on the destination network for every network route over interface 2 found 

in the route table. In this case, ipRouteDest 13.0.0.0, 14.0.0.0 and 15.0.0.0 exist in the 

route table for router 1 over interface 2. Accordingly, the connected router list would 

be generated to include Router 2, Router 4 and Router 5, as these are routers on 

networks 13.0.0.0, 14.0.0.0 and 15.0.0.0. This list creation is shown at block 44 of 

FIG. 5. Then, for each router in the list, the following determinations are made: 

If isIntermediateRouter(R i} R, Rj ) = TRUE for all Rj , (i.e., for all other routers 
in the router list). 

In one such embodiment, this determination can be made by successive decision 
operations which are carried out to compare a) the interface that connects the 
particular connected router to the examined router, with b) the interface that connects 
the particular connected router to another connected router in the connected router 
list. These operations can be carried out until all comparisons have been made for the 
connected router against all other connected routers in the connected router list. If 
these interfaces prove to be different for all of the other connected routers, then R* is 
the immediate neighbor. So in this example, if Rj is Router 2 (the first router in the 
connected router list generated), then Rj would be Router 4 and Router 5 (the other 
routers in the connected router list). The first decision operation can then be 
conducted to compare the interface of Router 2 that is connected to Router 1 to the 
interface of Router 2 that is connected to Router 4. In this case, it is determined that 
these interfaces differ (i.e., interface 1 of Router 2 does not equal interface 3 of Router 
2), as shown at block 46 of FIG. 5. Then, a successive operation can be conducted to 
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compare the interface of Router 2 that is connected to Router 1 to the interface of 

Router 2 that is connected to Router 5. In this case, it is determined that these 

interfaces also differ (i.e., interface 1 of Router 2 does not equal interface 4 of Router 

2), as shown at block 48 of FIG. 5. These operations can be expressed by the 

following illustrative condition operations: 

isIntermediateRouter (Router 2 Router 1 Router 4) = 
TRUE 

isIntermediateRouter (Router 2Router 1 Router 5) - 
TRUE 

Thus, because both of these conditions are true, Router 2 is the immediate neighbor, 

as shown at block 50. 

The same decision functions can be carried out for the interfaces of each other 

router in the connected router list (i.e., for routers 4 and 5). Thus, Ri would then be 

set to Router 4 to examine that router, and Rj can be set to Router 2 and Router 5 (the 

other two routers in the connected router list. In this case: 

isIntermediateRouter(Router 4 Router 1 Router 2)= 
FALSE 

isIntermediateRouter (Router 4 Router 1 Router 5)= 
FALSE 

Thus Router 4 is NOT the immediate neighbor. 

Similarly when Ri is Router 5, then Rj is Router 2 and Router 4 and: 

isIntermediateRouter(Router 5 Router 1 Router 2) = 
FALSE 

isIntermediateRouter(Router 5 Router 1 Router 4) = 
FALSE 

Thus Router 5 is also NOT the immediate neighbor. 

These operations are shown in block 52 of FIG. 5. 

Finally, in this embodiment, it is confirmed if Rj has an unnumbered route 
back to R over interface J. This can be conducted by checking the route table of Rj to 
confirm that Ri has a corresponding route to one of R's networks or a default route, 
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and that interface J of Rj is an unnumbered interface. Then, an unnumbered link is 
identified between R's interface I and Rj's interface J by storing data indicative of this 
link or by otherwise assigning an identifier or address for this link . In this example, 
Router 2 is identified as the immediate neighbor. Analyzing the router data for Router 
5 2, it is confirmed that Router 2 has a route to Router 1 over interface 1 (i.e., Router l's 
network 1 1 .0.0.0 is the ipRouteDest of interface 1 of router 2), and that this interface 
1 of router 2 is an unnumbered interface (i.e., interface 1 of router 2 has an IP address 
of 0.0.0.0 in the ipAddrTable), as shown at blocks 54 and 56. Therefore, data is 
stored to indicate that an unnumbered link exists between Router l's interface 2 (the 
10 router and the interface that were being examined) and Router 2's interface 1, as 
shown at block 58. This can be achieved, for example by storing an indication or data 
such as the following: 

[Router 1 -Interface 2] connected to [Router 2-Interface 1] 

This indication can then be displayed to the network manager on the network 
15 topology display screen or report, to indicate to the manager that this link, which was 
previously unidentifiable, in fact exists. 

The following describes examples of data structures that can be utilized with one 
or more of these example methods and systems described herein. 

In particular, the following router structure can be used to store the information of 
20 a router. This information can also be used in the subsequent cycles of discovery to 
detect changes. 

Router 
{ 

25 default__router_ip; 

interface_count; 

Interface *interface_list; 

Router *next_router; 

30 found_in_this_cycle; 

snmp_route *route_list; 

20 



5 



} 

A list of all the routers can then be pointed to by: 
Router *Router_List; 



Moreover, the following structure can be used to represent one interface of the 
router. This structure can be made part of the Router structure described above. It 
10 represents one interface of the router. 



Interface 
{ 

ifjndex; 
1 5 if__type; 

ip_address; 
ip_mask; 

operational_status; 
Interface *next_interface; 
20 Router *parent_router; 

if_route *if_route_list; 
connectedjrouter *connected_routerJist; 

} 

25 

Additionally, a data structure called "snmp_route" can be defined to represent one 
route known to a router, such as per the following: 

snmp_route 
30 { 

ip_route__dest; 
ip_route_Jype; 
ip_route_if_index; 
snmp_route *next_route; 

35 } 

Another structure, the if_route structure, can be created to represent a route 
over a particular interface. An entry of this type can be added to 
Interface.if route_list if the Interface is found to be an unnumbered interface: 

40 

if_route 
{ 

ip_route_dest; 
if_route *next_route; 

45 } 
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Additionally, a structure called connected_router can be defined to represent a 
router which is reachable over a particular interface. An entry of this type can be 
5 added to Interface.conn_router_list if the Interface is found to be an unnumbered 

interface and it has a route to one of the networks of this router: 

connected_router { 

Router *router_ptr; 
10 connected_router *next_router; 

} 

The block diagram of FIG. 6 depicts an illustrative relationship between the 
above example data structures. These data structures, and the methods described 

15 herein, can be implemented via any of a variety of software programming 

languages, and can carry out the functions described herein as part of a network 
management software program stored in memory and executed by one or more 
processors on a computing device(s) which is connected to a computing network 
for discovery of the topology of that network. As can be understood, while these 

20 data structures are disclosed herein with specific names and architectures, the data 

structures and methods described herein can be implemented using a wide array of 
software and hardware techniques and architectures. 

In addition to the above structures, a connectivity_node structure can be 
25 generated to represent an unnumbered connectivity (i.e., an unnumbered link) 

which is identified between two routers according to the methods described 
herein. It is this data structure that can then be provided to the network manager 
and/or used to generate a topology map indicating the identified connectivity: 

30 connectivity_node 
{ 

router_one_ip; 
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router_one_iflndex; 
router_two_ip; 
router_two_iflndex; 
ifjype; 

segment_name; 
flag_found; 

connectivitynode *next; 

} 

Moreover, for all unnumbered connectivity identified by the method, a list can be 
maintained to store all such locations found. For example, a list of all such 
unnumbered connectivity identified can be pointed to by a variable such as the one 
defined below. The network manager can also have access to this table and/or a 
topology can be generated therefrom: 

connectivity_node *connectivity_tab!e; 

FIG. 7 is a flow chart depicting another example of a method that can be used by a 
network management application to discover the routers in the network and identify 
unnumbered links, according to aspects of the present invention. This method can be 
repeated in every cycle of discovery. In this embodiment, MDB and SNMP data is 
utilized, although the principles of the method can be applied to other protocols now 
known or later developed. 

As shown by steps 72-79 of the example of FIG. 7, in this embodiment, 
information regarding the routers in the network is first discovered. In particular, 
first, the addresses of the routers are provided by the user to a data structure, such as 
Router_List for example, as shown in block 72. In particular, in this embodiment, the 
user provides the address of the default gateway and addresses of all the routers that 
contain unnumbered links. In this embodiment, the method does not automatically 
discover the routers with unnumbered links as the router address may not be found in 
the ipRouteNextHop of ipRouteTable of any router. However, automated methods 
may be utilized in other embodiments. 
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Then, as shown by block 74, for every router R in the RouterJList, the 
variable R.found_in_this_cycle is set to false and the MIB-II system group is queried, 
which contains the name of the system, its physical location, and the like, an example 
of which is shown in detail near the end of this description. 

In addition, as shown at block 76, for each router R, the interface data 
structure is created for each entry in the ifTable. In particular, if an interface has an 
IP address bound to it, this information is updated in the Interface data structure. If an 
interface has more than one IP address bound, one copy of the Interface data structure 
is created for each IP address. Additionally, each Interface is added to 
R.interface_list, as shown in block 77. 

Next, as shown in block 78, for each router R, an snmp_route is created for 
each row in ipRouteTable and added to R.routejist. If a valid address is found in 
ipRouteNextHop, this is added to the RouterJList. 

Then, as shown in block 79 if all information is successfully obtained, 
R.found_in_this_cycle is set to true if all the information. As also shown in this 
block, the router information in the topology database is updated. These operations 
are then repeated until the last router in the RouterList has been processed. The 
operations of blocks 72-79 can be depicted by the following pseudocode: 

1.1. Add router addresses provided by the user to Router_List 

1 .2. For every router R in the Router_List 

1 .2. 1 Set R.found_in_this_cycle = false 

1 .2.2 Query MIB-II system group 

1 .2.3 Query MIB-II ifTable and ipAddrTable 

1 .2.4 Query MIB-II ipRouteTable 

1 .2.5 Set R.found_in_this_cycle to true if all the information is 

successfully obtained 

1 .2.6 Update the router information in the topology database 
1 .2.6 Go to the next router in Router List 
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Then, as shown by blocks 84-88, a route list is built for all unnumbered interfaces 

that have been discovered in the previous steps of blocks 72-79. In particular, in these 

steps, for each unnumbered interface, the if j*oute_list is populated with the existing 

routes (to destination networks) over this unnumbered interface. Specifically, with 

respect to block 84, for every router R in the router list that was found, and for every 

route in R's route list, the method finds the interface in the interface list for the 

ip_routeif_index, which is the iflndex value found in the route table that links or 

cross-references this route to an entry in the interface table . Then, if it is determined 

that the interface is a PPP or X.25 or frame relay type (a point to point type), and the 

interface is operational, and the interface has an IP address of 0.0.0.0., then the 

network route for the interface is added to the interface route list for the interface, as 

shown at block 86. However, if the route destination is a default route, then all other 

routes in the interface route list are removed and new routes are prohibited from being 

added, as shown in block 88. These steps of blocks 84-88 can also be represented by 

the following pseudocode: 

2. 1 . For every router R in Router_List with R.found_in_this_cycle = true 

2.1.1. For every route in R.route_list 

Find the Interface in R.interface_list for the ip_route_if_index 
If (Interface.ifjype = (PPP or X.25 or Frame Relay) 
AND Interface.operational_status = UP 

AND Interface.ip_address = 0.0.0.0) 

- Add ip_route_dest to Interface. if_route_list 

- If ip_route_dest = 0.0.0.0 (i.e. the default root) 

- Remove all other routes in if route list (routes already added) 

- Disallow new routes from being added to this if_route_list 

The next step in the example method of FIG. 7 is to mark the unnumbered 
connectivity discovered in a previous discovery cycle. This is done so that 
previously discovered unnumbered links can be removed from the data structures 
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if they are not found in this cycle of discovery. This step is shown at block 90 and 
can be represented by the following: 

3.1. Set cormectivity_node.flag_found = false for all existing nodes in 
5 connectivityjable 

Steps 92-102 of FIG. 7 can then be utilized to build the connected router list, 
identify the immediate neighbor using the list, and create connectivity nodes in the 
topology database for every unnumbered link, according to principles of the 

10 present invention. In particular, in these steps, the connected router list for each 

unnumbered interface is populated with routers which are reachable through that 
interface. Among these routers, the router directly connected at the other end of 
the unnumbered link (the immediate neighbor) has the property of having routes 
to the router being examined and all other routers in the connected router list over 

15 two different interfaces. This property is used to identify the immediate neighbor. 

Then, if the immediate neighbor thus identified has a route back to the router 
being examined over an unnumbered interface, an unnumbered link has been 
identified. 

In particular, at steps 92 and 94, for every router R that was entered in the 
20 router list, and for every interface I of R that was entered in the interface list, and 

for every entry in the interface route list for each interface: a) each destination 
router is added to the connected router list, and b) if no destination routers are 
found, then this route is removed from the interface route list. Then, the 
interfaces of the routers in the connected router list are examined to determine the 
25 immediate neighbor. In particular, as shown at blocks 96 and 98, for every router 

Ri in the connected router list and for every other router Rj in the connected router 
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list, it is determined whether Ri connects to R and to all other routers Rj via two 
different interfaces. If so, then Ri is the immediate neighbor and this is noted. 
Then, as shown at blocks 99-102, it is determined if the immediate neighbor Ri 
has a route to one of Rs networks or to a default route over an unnumbered 
5 interface J. In particular, as shown at block 99, If the interface type for interface I 

of the router R and the interface J are different, then the analysis is repeated with 
respect to the next interface. If it is determined at block 100 that there is a 
connectivity node between R and Ri with the same interface type and same 
interface indices, then the connectivity list (a running list of unnumbered 

10 connectivities or links) already includes this connectivity (it was discovered in a 

previous cycle). Thus, for this connectivity, only the connectivity node flag for 
that node needs to be set to true, thereby identifying the node as shown by block 
102 . Otherwise, as shown by block 101, a connectivity node data structure needs 
to be created for the node and the unnumbered connectivity is added to the 

15 topology database, such that it will be identified by the network manager, who 

accesses that database or views a topology created therefrom. The connectivity 
node flag is also set to true in this case as well. 

These steps can be represented by the following pseudocode: 



20 4.1. For every router R in RouterList with R.found_in_thiscycle = true 

4.2. For every interface I in R.interface_list 

4.2. 1 For every entry in if_route_list 

Add routers on ip_route dest to connected_router_list if that 
router is found in this cycle. Each node of connected router list will 
25 contain pointers to the actual router. A new router is added only if it 

does not exist. 

If no routers are found on ip_route dest, remove this route 
from if_route_list 
4.2.3 For every router Rj in connected_router_list 
30 - For every Rj in connected_router_list (other than R\) 

- If isIntermediateRoute^Ri, R, Rj) = TRUE for all Rj 
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Rj is the immediate neighbor 
If Rj (the immediate neighbor) has a route to one of R's 
networks or contains a default route over an unnumbered interface J 

If ifType of the interface I of R and interface J of Rj are 

different, go to next interface (Step 4.2) 
Find a connectivitynode between R an R\ (Any IP 

Address) with same ifType and iflndeces 
If a node is found, set connectivity_node.flag_found = 
true 

Else create a connectivity_node with flag_found = true. 

Add the unnumbered connectivity to the 
topology database 



Finally, as shown by block 104, links are removed from the connectivity table 
if those links were not discovered in this cycle. In particular, if the connectivity 
table contains a link between two routers discovered in a previous cycle but not in 
this cycle, and if the two routers have been discovered successfully in this cycle, 
the unnumbered connectivity is deleted. The connectivity is not deleted if one of 
the routers is not discovered in this cycle. In particular, as shown at block 104, for 
every connectivity node in the connectivity table, if the flag for the node is false, 
the two routers for the node are accessed from the router list. Then if the flag 
indicating that the router was found in this present cycle is true for both routers, 
the corresponding connectivity node for the routers is removed from the 
connectivity table, and the unnumbered connectivity node is removed from the 
topology database, as shown at block 104. In other words, that unnumbered node 
was not found in the present cycle of the discovery method and therefore that node 
should no longer be indicated as being unavailable (i.e., it is either now numbered 
or is no longer a current link). These steps can be represented by the following 
pseudocode: 



5.1 For every connectivity_node in connectivity_table 

5.2 If connectivity_node.flag_found = false 
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5.3.1 Find the two routers in RouterList 

5.3.2 If Router. found_in_this_cycle = true for both the routers 

Remove the connectivity_node from the 
connectivity_table 

Remove the unnumbered connectivity from the 
topology database 

Although various protocols could be implemented with the above example 
embodiments, the embodiments can be applied to SNMP protocol. The following 
table is a summary of the SNMP information that can be used by the router discovery 
method discussed above in order to carry out the inventive unnumbered link discovery 
techniques. 



Protocol 


Object Identifier 


What is Discovered 


SNMP - System group 

sysDescr 

sysName 

sysContact 

sysLocation 


1.3.6.1.2.1.1.1 
1.3.6.1.2.1.1.5 
1.3.6.1.2.1.1.4 
1.3.6.1.2.1.1.6 


System information. 


ifNumber 
SNMP - ifTable 
iflndex 
ifDescr 
ifType 

ifPhysAddress 
ifOperStatus 


1.3.6.1.2.1.2.1 

1.3.6.1.2.1.2.2.1.1 
1.3.6.1.2.1.2.2.1.2 
1.3.6.1.2.1.2.2.1.3 
1.3.6.1.2.1.2.2.1.6 
1.3.6.1.2.1.2.2.1.8 


Information about each interface on the router 


ipForwarding 
SNMP - ipAddrTable 
ipAdEntAddr 
ipAdEntlflndex 
ipAdEntNetMask 


1.3.6.1.2.1.4.1 

1.3.6.1.2.1.4.20.1.1 
1.3.6.1.2.1.4.20.1.2 
1.3.6.1.2.1.4.20.1.3 


IP to MAC bindings for this host. 

The value of ipForwarding decides whether IP routing is 
enabled on this device. 

ipAdEntlflndex is the iflndex value of the interface in 
ifTable to which this IP Address is bound 


SNMP - ipRouteTable 

ipRouteDest 

ipRoutelflndex 

ipRouteNextHop 

ipRouteType 


1.3.6.1.2.1.4.21.1.1 
1.3.6.1.2.1.4.21.1.2 
1.3.6.1.2,1.4.21.1.7 
1.3.6.1.2.1.4.21.1.8 


The routes known to this router 

ipRouteDest is the destination network. An address of 
0.0.0.0 denotes the default route. ipRoutelflndex is the 
iflndex value of the interface in ifTable over which the 
route exists to the destination network. 



FIG. 8 is a schematic diagram illustrating an example of a system where the 
methods described above could be executed. In particular, in this example, the 
network management system 120 includes software executed by network managing 
server 122, which can be controlled by a network manager via a management console 
124, for controlling, configuring and monitoring network 126. The network 
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management system 120 can include standard network software modules or functions 
128, as well as modules that operate according to principles of the present invention, 
such as those which operate according to the example methods described . In this 
example, the system includes a connected list generation module 130 for identifying 
unnumbered interfaces and determinining routers connected to unnumbered 
interfaces, an immediate neighbor determination module 132 for determining the 
immediate neighbor to an unnumbered interface based upon properties of the 
connected routers, a default/network route confirmation module 134 for confirming 
connection of the immediate neighbor to the unnumbered interface, and an 
unnumbered connectivity list generation and maintenance module for maintaining 
identifiers of the unnumbered links. These links, such as the unnumbered link 
between Rl and R2, can then be identified to a network manager who is using the 
system 120 to discover network topology. 

The above illustrative embodiments depicting various aspects of the invention 
can be utilized with a wide variety of applications, protocols, data configurations, 
network architectures, and addressing schemes. For example, although reference has 
been made to routers and SNMP protocol, the methods have application to a variety 
of network devices and a variety of network protocols. Moreover, as can be 
understood, the methods, systems and functions described herein can be implemented 
in computer executable instructions, routines, sections of code, software components, 
programs, or the like, which operate via one or more processors, controllers, 
computational devices, or appropriate hardware components. Any of a variety of 
software or programming languages can be utilized for this purpose. Moreover, the 
data and programmed methods referred to herein may be stored on any suitable 
storage medium, such as on hard disk drives, CD-ROM drives, backup storage 
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devices, or other memory devices, such as suitable non-volatile optical, magnetic, or 
electronic memory devices. Furthermore, a variety of suitable types of computing 
devices could be utilized to implement the methods and systems described herein, 
including computers, data processors, or other devices having appropriate circuitry or 
hardware connected in an appropriate manner for use for the described functions. 
Accordingly, the foregoing description of the illustrative embodiments has been 
presented for purposes of illustration and description of the various principles of the 
inventions. It is not intended to be exhaustive or to limit the inventions to the precise 
forms disclosed, and modifications and variations are possible in light of the above 
teachings. For example, although a number of methods, systems, operations, and 
configurations have been described in the illustrative embodiments, it is to be 
understood that additional or alternative methods, systems, orders of operation and 
configurations could be used without departing from the scope of the inventions. 
Moreover, although various aspects of the inventions have been illustrated, these 
aspects need not be utilized in combination. Likewise, the principles of the present 
invention are applicable to a number of routing devices, including routers, switches, 
computers, and gateways, as well as other network devices. 

Therefore, it should be understood that the embodiments were chosen and 
described merely in order to best illustrate the principles of the inventions and some 
examples of possible practical applications. This illustration was also provided to 
thereby enable one of ordinary skill in the art to utilize the aspects of the inventions in 
various embodiments and with various modifications as are suited for the particular 
use contemplated. Accordingly, it is intended that the scope of the inventions be 
defined by the claims appended hereto. 
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